Policy

Prevent Internet Explorer security prompt for Windows Installer scripts

This policy setting allows Web-based programs to install software on the computer without notifying the user. If you disable or do not configure this policy setting, by default, when a script hosted by an Internet browser tries to install a program on the system, the system warns users and allows them to select or refuse the installation. If you enable this policy setting, the warning is suppressed and allows the installation to proceed. This policy setting is designed for enterprises that use Web-based tools to distribute programs to their employees. However, because this policy setting can pose a security risk, it should be applied cautiously.

Policy
Pack Microsoft Windows
Category Windows Components / Windows Installer
Policy ID c1ca4d2bbc21
Internal name SafeForScripting

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\Installer\SafeForScripting (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\Installer\SafeForScripting (disabled) = 0

Policy notes

This policy setting allows Web-based programs to install software on the computer without notifying the user. If you disable or do not configure this policy setting, by default, when a script hosted by an Internet browser tries to install a program on the system, the system warns users and allows them to select or refuse the installation. If you enable this policy setting, the warning is suppressed and allows the installation to proceed. This policy setting is designed for enterprises that use Web-based tools to distribute programs to their employees. However, because this policy setting can pose a security risk, it should be applied cautiously.

Related policies

Allow user control over installsAllow users to browse for source while elevatedAllow users to patch elevated productsAllow users to use media source while elevatedAlways install with elevated privilegesControl maximum size of baseline file cacheEnforce upgrade component rules